Out-of-bounds read in Linux kernel - CVE-2026-90011

Vulnerability identifier: #VU150280

CSH Severity: High

CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-90011

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to disclose sensitive information and cause a denial of service.

The vulnerability exists due to an out-of-bounds read in the iSCSI target login payload buffer when processing a crafted login PDU without a terminating null byte. A remote attacker can send a crafted login PDU to disclose sensitive information and cause a denial of service.

Exploitation is reachable through the CHAP authentication path on a portal configured for CHAP.

Linux kernel
openEuler
kernel
bpftool
bpftool-debuginfo
kernel-debuginfo
kernel-debugsource
kernel-devel
kernel-headers
kernel-source
kernel-tools
kernel-tools-debuginfo
kernel-tools-devel
perf
perf-debuginfo
python3-perf
python3-perf-debuginfo

Install security update from vendor's repository.

kernel - update to 5.10.0-335.0.0.236
bpftool - update to 5.10.0-335.0.0.236
bpftool-debuginfo - update to 5.10.0-335.0.0.236
kernel-debuginfo - update to 5.10.0-335.0.0.236
kernel-debugsource - update to 5.10.0-335.0.0.236
kernel-devel - update to 5.10.0-335.0.0.236
kernel-headers - update to 5.10.0-335.0.0.236
kernel-source - update to 5.10.0-335.0.0.236
kernel-tools - update to 5.10.0-335.0.0.236
kernel-tools-debuginfo - update to 5.10.0-335.0.0.236
kernel-tools-devel - update to 5.10.0-335.0.0.236
perf - update to 5.10.0-335.0.0.236
perf-debuginfo - update to 5.10.0-335.0.0.236
python3-perf - update to 5.10.0-335.0.0.236
python3-perf-debuginfo - update to 5.10.0-335.0.0.236

• https://git.kernel.org/stable/c/1624bff4c5118ad494d50ad94d44f22064667a7f
• https://git.kernel.org/stable/c/3ddf3ea291a0ef2ea93b82e158960ac2cc42302b
• https://git.kernel.org/stable/c/5fac79f248c37774d1dd761406f83d25ca6ff8e4
• https://git.kernel.org/stable/c/6b589ef9d5f6cdc70d2b4f269ca6cf26b5ebb076
• https://git.kernel.org/stable/c/6ddddcad436d8e6e619204d3c848147ff2f5bf1e
• https://git.kernel.org/stable/c/b19dc17ed963ac36c0db4b52a1803fb11169f91f
• https://git.kernel.org/stable/c/eb9dadf4d552ebe10644871c5189286552aa48f5
• https://git.kernel.org/stable/c/f4825922d2fb371e2b969697d792077f1b62b62c

• Out-of-bounds read in Linux kernel target iscsi driver
• openEuler 22.03 LTS SP4 update for kernel